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AMENDMENTS TO THE CLAIMS 



This listing of claims will replace ail prior versions and listings of claims in the 
application, 

1. (Currently Amended) In a client-server-document repository system, a 
secure method for remote action by reference, comprising: 

establishing a communication channel directly between the client and the 
server via one of a wireless link and a landline; 

sending, from the client to the server via the communication channel, user 
credentials pertaining to a document stored in a document repository and requesting an 
action be performed on the document, a delegation credential giving permission to the 
server to obtain the document from the document repository and permitting the server 
to perform the action on the document on the user's behalf and the address of the 
document in the document repository; 

verifying, at the server, the user's credentials and the delegation credential; 

if verified, sending, from the server to the document repository, server 
credentials, the delegation credential and the address of the document; 

verifying, at the document repository, the server's credentials and the 
delegation credential; 

if verified, sending the document from the document repository to the 

server; and 

performing the action on the document at the server. 



2. (Original) The method of claim 1 , wherein the server comprises a printer. 

3. (Original) The method of claim 1, wherein the server comprises a multi- 
function device for printing, faxing and scanning. 

4. (Previously Presented) The method of claim 1, further comprising 
establishing a secure connection between the client and server prior to sending the 
user credentials, delegation credential and address of the document, 
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5. (Previously Presented) The method of claim 1, wherein the document 
address comprises a URL. 

6. (Original) The method of claim 1, wherein the delegation credential 
comprises a certificate signed by the client and including the delegator, detegatee, URL 
of the document to be fetched, URL of the server, access rights and constraints 
delegated to the server. 

7. (Original) The method of claim 1. wherein the client comprises a mobile 
device. 

8. (Original) The method of claim 7, wherein the mobile device comprises a 

PDA. 

9. (Original) The method of claim 7, wherein the mobile device comprises a 
cell phone. 

10. (Original) The method of claim 1, wherein the delegation credential 
includes a time limit, wherein upon expiration of the time limit, the server's permissions 
expire. 

1 1 . (Original) The method of claim 1 , further comprising: 

sending, from the client to the server, a delegation credential for authorizing 
payment for the action to be performed by the server; 

sending, from the server to a payment provider, server credentials and the 
payment delegation credential; 

verifying, at the payment provider, the server's credentials and the payment 
delegation credential, and if valid directing payment to the server. 

12. (Original) The method of claim 1, wherein the delegation credential 
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comprises a Satchel token. 

13. (Original) The method of claim 1, wherein the delegation credential 
comprises an SPKI certificate. 

14. (Original) The method of claim 1, wherein the server comprises a printer 
and the action comprises printing the document and wherein the verifying step 
comprises verifying if the client has rights on the printer and if not sending an error 
message to the client. 

15. (Original) The method of claim 14, further comprising verifying, at the 
printer, if sufficient media is available. 

16. (Original) The method of claim 15, further comprising, upon printing the 
document, sending the client a notice. 

17. (Original) The method of claim 3, wherein the delegation credential includes 
the client's access rights associated with the document and constraints on the server, 

18. (Original) The method of claim 17, wherein the client's access rights include 
printing, faxing, copying and fetching and wherein the server's constraints include a 
predetermined number of copies that may be made and a predetermined period of time 
in which actions on the document may be provided. 

19. (Currently Amended) In a client-server-document repository system, a 
secure method for remote action by reference, comprising: 

establishing a communication channel directly between the client and the 
server via one of a wireless link and a landline; 

sending, from the client to the server via the communication channel, user 
credentials to release a plurality of documents stored in a document repository and a 
plurality of delegation credentials, wherein each delegation credential includes 
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permissions for the server to obtain a document from the document repository and to 
perform an action on the document on the user's behalf and the address of the 
document; 

for each delegation credential, 

verifying, at the server, the user's credentials and the delegation credential; 
if verified, sending, from the server to the document repository, server credentials, the 
delegation credential and the address of the document; 

verifying, at the document repository, the server's credentials and the 
delegation credential; 

if verified, sending the document from the document repository to the 

server; and 

performing the action on the document at the server. 

20. (New) In a client-server-document repository system, a secure method for 
remote action by reference, comprising: 

establishing a secure communication channel directly between the client 
and a document repository via one of a wireless link and a landline; 

sending, from the client to the document repository via the communication 
channel, user credentials pertaining to a document stored in the document repository, a 
delegation credential giving permission to a server to obtain the document from the 
document repository, requesting an action be performed on the document at a server 
and permitting the server to perform the action on the document on the user's behalf, 
the address of the server and the address of the document in the document repository; 

verifying at the document repository the user's credentials; 

if verified, sending from the document repository to the server, the 
document repository's credentials, the delegation credential and the document; and 

verifying, at the server, the document repository's credentials and the 
delegation credential; 

if verified, performing the action on the document at the server. 
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